Skip to content

Instantly share code, notes, and snippets.

@atierian

atierian/action_scan.sh

Created May 19, 2023 15:01
Show Gist options
  • Save atierian/a59625094ec0d0090e55759f218fb947 to your computer and use it in GitHub Desktop.
Save atierian/a59625094ec0d0090e55759f218fb947 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
action_scan.sh
#!/bin/bash
echo "🧪 scanning for shell injection"
semgrep --config="r/yaml.github-actions.security.run-shell-injection.run-shell-injection"
echo "\n\n"
echo "🧪 scanning for target code checkout"
semgrep --config="r/yaml.github-actions.security.pull-request-target-code-checkout.pull-request-target-code-checkout"
echo "\n\n"
echo "🧪 scanning for unsecure commands"
semgrep --config="r/yaml.github-actions.security.allowed-unsecure-commands.allowed-unsecure-commands"
echo "\n\n"
echo "☑️ scans complete"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment